RMM
Manage Engine (Desktop Central)
Manage Engine (Desktop Central) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
dcagentservice.exe
dcagentregister.exe
Code signing
- signer name
- ZOHO Corporation Private Limited
- issuer
- CN=GlobalSign GCC R45 CodeSigning CA 2020
- certificate thumbprint
- 03498B4CC5B51DB6CE80699F23CAC1724BB36B69
- tbs sha256
- 48D169144280CEF6AF2316D3DD3BD8B8790D35B71601A48BD77C2A5F1E1E860B
- tbs sha1
- 89D154D8D97B4FAF3E0B6427731BFC935939895E
- valid from
- 2023-12-11T17:00:36+00:00
- valid to
- 2026-10-09T07:40:58+00:00
- src file path
- downloaded_files/manage_engine_(desktop_central)/7ac27dd17b4cfa28f37deb6dcb9519b4e7a2dd405134ac881a8c49d32cb904e6
- src file company
- ZOHO Corporation
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 9CFE33A8A1FB933BEDF943EF4263D03B6A5F828E
- src file sha256
- b9326bd53d5cfd1d1ff72f52e92e776487e206e76363d4c23a3c60143349c790
- src file path
- downloaded_files/manage_engine_(desktop_central)/b9326bd53d5cfd1d1ff72f52e92e776487e206e76363d4c23a3c60143349c790
- src file company
- Zoho Corporation Pvt. Ltd.,
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 039B7B91AFEFDB68B36E6A2D246545D581D1BF0D
- src file sha256
- e65be97dfb0ae62de4bfbfed140aaa1e16e9f4461e8e29c9816fc54dea595694
- src file path
- downloaded_files/manage_engine_(desktop_central)/e65be97dfb0ae62de4bfbfed140aaa1e16e9f4461e8e29c9816fc54dea595694
- src file company
- Zoho Corporation Pvt. Ltd.,
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 1FFC1D0860B748F0E9D53297B716E497C81D687B
- src file sha256
- b51dee244adcf4795db9378e56897a97b48eb2c3d4ed758af98ddab2e6f9967b
- src file path
- downloaded_files/manage_engine_(desktop_central)/b51dee244adcf4795db9378e56897a97b48eb2c3d4ed758af98ddab2e6f9967b
- src file company
- ZOHO Corporation
- signer name
- ZOHO Corporation Private Limited
- certificate thumbprint
- 99869B5E06680A842469CC3DA2F2DFFFE75AC930
- src file sha256
- 6d7903597fc23baa069da2d0fe6959b0c1f01644461bb9f842e6326f1a49077a
- src file path
- downloaded_files/manage_engine_(desktop_central)/6d7903597fc23baa069da2d0fe6959b0c1f01644461bb9f842e6326f1a49077a
- src file company
- ZOHO Corp
search names
8k1qq1.exe
dcagentregister.exe
dcagentservice.exe
m6hufo2as.exe
company names
signer names
ZOHO Corporation Private Limited
File hashes
- authenticode
- file name
- dcagentregister.exe
- sha256
- 120EF91BB2F6959566EF75D1266F244846BD87F3EC14B847A37D009585C41356
- sha1
- B3867DA794285F5191181FC59A6F7BFA5AD9FDDC
- file name
- m6hufo2as.exe
- sha256
- 44549C403246C5ACFC715E13D0C08ED825459E5E6CE18A74663AE9167EC18AD8
- sha1
- 0ECA79ED2B35A87FE1081424E1E753A3CDB6CB31
- file name
- dcagentregister.exe
- sha256
- 53815CA5A4F05B9A44C3D2CE6E53D5DF7E5B2DFDAA4B179C417858CADB6890A6
- sha1
- F873CDF10AC35644062667F8BB65DA822667CF42
- file name
- 8k1qq1.exe
- sha256
- 8557CC97E13D38181061BD1B9534DAA79BEE75641F66902547F976F371754616
- sha1
- 52022906A6BFA29D99D4FA5C9BC91CD45293B0E4
- file name
- dcagentregister.exe
- sha256
- FE8B12417CE05763B55D31710428AF0D87847716577201390ACAD71965883C30
- sha1
- 4DFDDF8496E5AAA9EEE15359D915D4F1F14BAFA9
- page
- Not recorded
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- desktopcentral.manageengine.com
- desktopcentral.manageengine.com.eu
- desktopcentral.manageengine.cn
- *.dms.zoho.com
- *.dms.zoho.com.eu
- *.-dms.zoho.com.cn
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__network_sigma.yml
- Description
- Detects potential network activity of Manage Engine (Desktop Central) RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__processes_sigma.yml
- Description
- Detects potential processes activity of Manage Engine (Desktop Central) RMM tool